Augment default analytics

import { GlossaryTooltip, Render } from "~/components"

Cloudflare provides analytics for security events, traffic patterns, and more according to the level of your zone's plan.

To augment these default analytics and gather more information about potential DDoS attacks, explore the following options.

Restore visitor IP addresses

When traffic proxied through Cloudflare reaches your origin server, it will come from Cloudflare's IP addresses.

If needed, you can restore the original visitor's IP address so you can have that information in your server logs.

Cloudflare Logs

Enterprise customers can set up Logpush jobs to regularly send Cloudflare logs to the SIEM system of their choice.

This data can help when looking at long-term DDoS attack trends or when you need custom visualizations.

Bot Management

For more detailed analytics about potential bot attacks, Enterprise customers can also purchase Bot Management.